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DETAILED ACTION 

Claim Rejections - 35 USC §102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis 
for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

Claims 1-6,10-15,17-18,23-41,46-57,59-74,76-77 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Feldman et al(US 7, 1 10,982). 

Claims 1-3,10-15,17-18: Feldman disclose exchanging key commitment information over a 
preferred channel between a credential issuing device and a prospective member device to pre- 
authenticate prospective member device in (fig.23A and col. 14-col. 15, Table 2A). Feldman disclose 
receiving a public key from prospective member device and verifying public key with key commitment 
information in (Fig.23A, col.l4,lines 29-39). Feldman disclose automatically provisioning prospective 
member device with a credential authorized by a credential issuing authority in (col.l8,lines 33-40). 

Claim 4: Feldman disclose credential is secret and communication channel is a secure 
communication channel in (fig.23A#2334). 

Claim 5: Feldman disclose configuring credential issuing authority in (fig.23A). 

Claim 6: Feldman disclose credential issuing device includes credential issuing authority in 
(col.l8,lines 33-39). 

Claims 23,25-28: Feldman disclose exchanging key commitment information over a preferred 
channel between a credential issuing device and a prospective member device to pre-authenticate 
prospective member device in (fig.23A and col. 14-col. 1 5 /Table 2A). Feldman disclose receiving a public 
key from prospective member device and verifying public key with key commitment information in 
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(Fig.23 A, col.l4,lines 29-39). Feldman disclose automatically provisioning prospective member device 
with a credential authorized by a credential issuing authority in (col.l8,lines 33-40). 

Claim 24: Feldman disclose public key received over preferred channel in (fig.23 A). 

Claim 29: Feldman disclose prospective member device is selected from one or more of the group 
consisting of a computer in (fig.23A). 

Claim 30: Feldman disclose secure credential infrastructure is a public key infrastructure 
credential issuing authority is a certification authority and credential is a public key certificate in 
(col.l6 5 Table 2C). 

Claim 31,37-39: Feldman disclose at least one port configured to establish a preferred channel 
and a key commitment receiver mechanism configured to receive key commitment information through at 
least one port in (fig.23A). Feldman disclose a key receiver mechanism configured to receive a public key 
and a pre-authentication mechanism configured to verify public key with key commitment information in 
(Fig.23 A, col.l4,lines 29-39). Feldman disclose a credential provisioning mechanism configured to be 
able to automatically provide a credential authorized by a credential issuing authority responsive to the 
pre-authentication mechanism in (col.l8,lines 33-40). 

Claim 32: Feldman disclose public key received over preferred channel in (fig.23A). 

Clam 33: Feldman disclose a key-pair validation mechanism configured to establish proof that a 
prospective member device is in possession of a private key corresponding to public key in (col.l4,lines 
29-39). 

Claim 34: Feldman disclose initialization mechanism configured to configure credential issuing 
authority in (col.3,lines 60-67;col.l5,lines 13-21). 

Claim 35: Feldman disclose credential issuing device comprises credential issuing authority in 
(col. 17,lines 55-65). 
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Claim 36: Feldman disclose network device configuration mechanism configured to send network 
configuration information over preferred channel in (fig.23A). 

Claim 40: Feldman disclose prospective member device is selected from one or more of the group 
consisting of a computer in (fig.23A). 

Claim 41: Feldman disclose secure credential infrastructure is a public key infrastructure 
,credential issuing authority is a certification authority and credential is a public key certificate in 
(col.l6,Table 2C). 

Claim 46: Feldman disclose at least one port configured to establish a preferred channel and a key 
commitment receiver mechanism configured to receive key commitment information through at least one 
port in (fig.23 A). Feldman disclose a key receiver mechanism configured to receive a public key and a 
pre-authentication mechanism configured to verify public key with key commitment information in 
(Fig.23 A, col.l4,lines 29-39). Feldman disclose a credential provisioning mechanism configured to be 
able to automatically provide a credential authorized by a credential issuing authority responsive to the 
pre-authentication mechanism in (col.l8,lines 33-40). 

Claim 47,51-56,59: Feldman disclose exchanging key commitment information over a preferred 
channel between a credential issuing device and a prospective member device in(fig.23A and col. 14- 
col.l5,Table 2A). Feldman disclose receiving a public key from prospective member device and verifying 
public key with key commitment information in (Fig.23 A, col.l4,lines 29-39). Feldman disclose 
receiving a credential authorized by a credential issuing authority in (coL18,lines 33-40). 

Claims 48,49: Feldman disclose establishing proof that credential issuing device is in possession 
of a private key corresponding to public key in (col.l4,lines 29-39). 

Claim 50: Feldman disclose secure credential infrastructure is a public key infrastructure, 
credential issuing authority is a certification authority and credential is a public key certificate in 
(co!.12,lines 28-36). 
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Claim 57: Feldman disclose key commitment information comprises a function of public key in 
(col. 14,lines 38-40). 

Claim 60: Feldman disclose prospective member device is selected from one or more of the group 
consisting of a computer in (fig.23 A). 

Claims 61-64: Feldman disclose exchanging key commitment information over a preferred 
channel between a credential issuing device and a prospective member device in(fig.23A and col. 14- 
coL15,Table 2 A). Feldman disclose receiving a public key from prospective member device and verifying 
public key with key commitment information in (Fig.23 A, col.l4,lines 29-39). Feldman disclose 
receiving a credential authorized by a credential issuing authority in (col.l8,lines 33-40). 

Claim 65: Feldman disclose key commitment information comprises a function of public key in 
(col. 14,lines 38-40). 

Claim 66: Feldman disclose prospective member device is selected from one or more of the group 
consisting of a computer in (fig.23A). 

Claim 67,71-74,76: Feldman disclose at least one port configured to establish a preferred channel 
and a key commitment receiver mechanism configured to receive key commitment information through at 
least one port in (fig.23A). Feldman disclose a key receiver mechanism configured to receive a public key 
and a pre-authentication mechanism configured to verify public key with key commitment information in 
(Fig.23 A, coL14,lines 29-39). Feldman disclose a credential provisioning mechanism configured to be 
able to automatically provide a credential authorized by a credential issuing authority responsive to the 
pre-authentication mechanism in (col. 1 8,lines 33-40). 

Claim 68: Feldman disclose establishing proof that credential issuing device is in possession of a 
private key corresponding to public key in (col.l4,lines 29-39). 



Application/Control Number: 10/656,550 Page 6 

Art Unit: 2135 

Claim 69: Feldman disclose a network interface configured to establish a communication channel 
with a credential issuing authority responsive to the key-pair validation mechanism in (fig.23 A and 
col.l2,lines 29-36). 

Claim 70: Feldman disclose secure credential infrastructure is a public key infrastructure 
credential issuing authority is a certification authority and credential is a public key certificate in 
(col.l6,Table 2C). 

Claim 77: Feldman disclose prospective member device is selected from one or more of the group 
consisting of a computer in (fig.23 A). 

Allowable Subject Matter 

Claims 7- 9,16,19-22,42-45,58,75 are objected to as being dependent upon a rejected base claim, 
but would be allowable if rewritten in independent form including all of the limitations of the base claim 
and any intervening claims. 

USPTO Contact Information 

Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to HOSUK SONG whose telephone number is 5712723857. The examiner can normally be 
reached on mon-fri. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, KIM 
VU can be reached on 5712723859. The fax phone number for the organization where this application or 
proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained 
from either Private PAIR or Public PAIR. Status information for unpublished applications is available 
through Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer 
Service Representative or access to the automated information system, call 800-786-9199 (IN USA OR 
CANADA) or 571-272-1000. 
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